last — indicate last logins by user or terminal
last [−number] [ −f filename ] [ −t tty ] [ −h hostname ] [ −i address ] [−l] [−y] [ name... ]
Last looks back
in the wtmp file
which records all logins and logouts for information about a
user, a teletype or any group of users and teletypes.
Arguments specify names of users or teletypes of interest. If
multiple arguments are given, the information which applies
to any of the arguments is printed. For example
``last rootconsole''
would list all of root's sessions as well as all sessions on
the console terminal. Last displays the sessions of
the specified users and teletypes, most recent first,
indicating the times at which the session began, the duration
of the session, and the teletype which the session took place
on. If the session is still continuing or was cut short by a
reboot, last so
indicates.
The pseudo-user reboot logs
in at reboots of the system.
Last with no
arguments displays a record of all logins and logouts, in
reverse order.
If last is
interrupted, it indicates how far the search has progressed
in wtmp. If
interrupted with a quit signal last indicates how far the
search has progressed so far, and the search continues.
numberlimit the number of entries displayed to that
specified by number.
−f filenameUse filename
as the name of the accounting file instead of
/var/log/wtmp.
−h hostnameList only logins from hostname.
−i IP
address"List only logins from IP address.
−lList IP addresses of remote hosts instead of truncated host names.
−t ttyList only logins on tty.
−yAlso report year of dates.